Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
File: 5xHIkR7brjbfGoC76BSyWg-UOfo.mft (raw, json)
Hash identifier: tNSl9tfUVRxUEHGyxRZIgg1Vr4IWaVmIEgGcYU6f4jo=
Subject key identifier: 55:5C:86:C6:FA:5C:2E:67:C5:56:7B:0F:01:9C:40:20:F3:67:0C:D3
Authority key identifier: E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
Certificate issuer: /CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Certificate serial: 01A0C7EB157538036E62E92EC383A557147B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
Manifest number: 0D84
Signing time: Tue 22 Sep 2026 07:01:07 +0000
Manifest this update: Tue 22 Sep 2026 07:01:07 +0000
Manifest next update: Wed 23 Sep 2026 07:01:07 +0000
Files and hashes: 1: 5xHIkR7brjbfGoC76BSyWg-UOfo.crl (hash: MEleo1eeQ8uAx+xoD9va92woLN5Cq4L+kWpjYMgzqx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:eb:15:75:38:03:6e:62:e9:2e:c3:83:a5:57:14:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e711c8911edbae36df1a80bbe814b25a0f9439fa
Validity
Not Before: Sep 22 07:01:07 2026 GMT
Not After : Sep 23 07:01:07 2026 GMT
Subject: CN=555c86c6fa5c2e67c5567b0f019c4020f3670cd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:1b:5e:96:55:0f:e9:6e:4d:db:18:cc:a2:18:
14:a4:dd:e2:b9:27:bf:f4:8b:c2:a2:8f:4f:71:9d:
1f:71:63:42:4b:fb:2c:de:76:5f:ae:d7:32:3f:3e:
14:f6:3d:e4:d8:a0:8d:43:bc:a3:93:ed:e7:49:13:
42:7a:48:dd:7e:05:80:3a:7f:a2:a9:ba:db:b1:00:
48:4d:a4:be:26:d2:b2:fd:cb:95:3b:c9:8c:5b:8c:
82:da:23:5c:90:58:1c:83:cc:c4:af:58:4a:36:15:
78:49:c5:22:db:4b:4f:c1:36:9b:96:8f:ae:91:3f:
f1:a1:6b:4e:c8:be:18:9c:d7:6c:a0:59:30:02:33:
f3:18:f2:ab:51:8d:fc:aa:dc:c7:a9:e7:d6:3d:3b:
7d:9c:f7:9b:94:97:1a:93:d5:99:d7:28:a5:4c:bb:
37:49:12:55:11:d8:18:d3:18:5d:57:0a:8e:dd:45:
c2:c8:41:5f:b4:82:a5:58:27:eb:68:0f:24:e0:15:
5a:fd:e1:4a:d8:27:4c:8e:64:6c:46:1b:35:ca:cb:
a6:41:7d:0a:25:de:3d:31:4e:60:b2:61:77:08:65:
66:e9:27:91:06:29:9c:47:ad:26:d0:b0:a2:0f:bf:
ce:e2:4e:7e:df:9a:84:31:0b:a0:4e:bb:f2:e0:26:
e5:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5C:86:C6:FA:5C:2E:67:C5:56:7B:0F:01:9C:40:20:F3:67:0C:D3
X509v3 Authority Key Identifier:
keyid:E7:11:C8:91:1E:DB:AE:36:DF:1A:80:BB:E8:14:B2:5A:0F:94:39:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5xHIkR7brjbfGoC76BSyWg-UOfo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aafc15-1e79-4fe9-9fad-03a4dd4a9156/1/5xHIkR7brjbfGoC76BSyWg-UOfo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:14:76:20:5a:15:8d:b5:21:ec:1a:aa:ba:de:37:7f:8d:17:
5e:f4:e0:c3:9a:e5:fb:45:d7:0a:44:60:54:16:b7:4a:ca:e5:
65:35:25:2a:5d:c6:cd:17:0f:7b:b6:c7:56:52:07:36:59:6c:
b0:3c:9a:c9:85:ba:82:9c:d5:ac:4d:d1:8f:6b:df:0e:cd:5b:
1d:58:b5:04:c2:93:ee:5d:51:d4:f1:0f:ad:76:a5:20:e6:12:
8c:4d:76:20:d5:d4:b1:66:f8:16:c8:ac:3c:ba:a1:f0:87:f8:
e4:bc:b8:19:e3:67:62:30:9d:25:ac:15:ee:cf:07:e5:86:76:
ea:02:61:12:f7:6e:b3:4c:21:94:36:40:9a:0d:69:4b:a5:6a:
56:6a:23:9f:00:f7:03:82:d7:a8:5c:84:b5:9d:fe:68:4b:29:
38:a7:ef:41:62:41:5d:fb:f1:ab:82:7f:e6:f1:83:e6:30:40:
04:4f:34:fc:e8:ae:c2:be:84:b0:a8:8a:a5:f7:bb:78:b5:d4:
17:11:16:47:f5:b2:a4:88:33:77:45:91:4e:f4:58:da:05:cd:
a0:68:f2:d1:32:88:fe:6f:24:0a:f7:a0:61:5b:1a:91:8a:15:
1e:23:84:02:c1:c1:0b:b9:ba:62:23:df:d5:48:3e:7c:64:df:
80:a7:8f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:23:29 2026 by rpki-client